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Top Stories 

• Crews worked to unclog frozen intake pipes to the Avon Lake Municipal Utilities water 
treatment plant in Lorain County, Ohio, after water flow was impeded January 8 resulting 
in water being brought in from other districts. - Elyria Chronicle -Tele gram (See item 11) 

• Authorities were still searching for a fifth sailor after a U.S. Navy helicopter crashed into 
the ocean off Virginia January 8, leaving two crew members in the hospital with injuries 
and two others dead. - Associated Press (See item 16) 

• A judge ruled January 8 that the South Carolina Department of Corrections was responsible 
for substandard treatment given to State prison inmates suffering serious mental illness. - 
South Carolina Department of Corrections; Columbia The State (See item 24) 

• A child was killed and four other people were injured in a fire at The Cider Mill 
Apartments in Montgomery County, Maryland, January 8, displacing more than 40 
residents, and leaving over $1 million in estimated damage. - WTOP 103.5 FM 
Washington, D.C. (See item 34) 
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Energy Sector 



1. January 8, Associated Press - (West Virginia) W.Va. DEP issues pollution violation 
notice to company following tank blast at drilling site. Operations at the Jay-Bee Oil 
& Gas’ Lisby gas well pad in Middleboume were halted after the West Virginia 
Department of Environmental Protection issued a pollution violation notice after a 
January 2 tank explosion at the well site injured one worker. The agency stated that 
fluids leaked from the tank onto grounds surrounding the well pad after it ruptured, 
which could potentially contaminate a fresh water supply. 

Source: 

http://www.therepublic.com/view/story/f584bf2606cb4751bfd2d9824512bce7/WV— 

Drilling-Explosion 

T Return to top i 

Chemical Industry Sector 

See item 14 
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Nuclear Reactors, Materials, and Waste Sector 

2. January 9, Softpedia - (International) Malware stole data from computer at 

Japanese nuclear power plant. Malware installed on an administrative computer at 
the Monju nuclear power plant in Japan could have potentially stolen around 42,000 
private documents from the plant’s systems. The malware was installed when a worker 
attempted to update a video playback program. 

Source: http://news.softpedia.com/news/Malware-Stole-Data-from-Computer-at- 
J apanese-Nuclear-Power-Plant-4 15175. shtml 
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Critical Manufacturing Sector 

Nothing to report 
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Defense Industrial Base Sector 



Nothing to report 
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Financial Services Sector 



3. January 9, Softpedia - (International) 40% of iOS banking apps leak sensitive data 
through system logs. A researcher at 10 Active analyzed 40 mobile banking apps for 
iOS devices and found several security issues, including that 40 percent of apps were 
vulnerable to man-in- the-middle attacks. 

Source: http://news.softpedia.com/news/4Q-of-iOS-Banking-Apps-Leak-Sensitive- 
Data-Through-Systems-Logs-415274.shtml 

4. January 9, Softpedia - (International) Scam emails distribute malware that steals 
Bitcoins from Bitcoin-Qt users. Researchers at LogRythm analyzed an email attack 
campaign targeting users of the Bitcoin-Qt wallet service that directs users to a Web 
site hosting malware that steals Bitcoins from the user’s wallet. 

Source: http://news.softpedia.com/news/Scam-Emails-Distribute-Malware-That-Steals- 
Bitcoins-from-Bitcoin-Qt-Users-415253.shtml 

5. January 8, Associated Press - (Idaho) ‘Duffel Bag Bandit’ pleads guilty to bank 
robberies. A man known as the “Duffel Bag Bandit” pleaded guilty January 8 to 
robbing one bank in Boise in March 2013 and agreed to pay restitution for money 
stolen in three other robberies in the area. 

Source: http://www.standard.net/stories/2014/01/08/duffel-bag-bandit-pleads-guilty- 
bank-robberies 

For another story, see item 19 

[ Return to top ] 

Transportation Systems Sector 

6. January 8, WWJ 62 Detroit - (Michigan) 1-94 reopens after water main break 
creates ‘sheet of ice.’ A water main break spilled at least one foot of water onto all 
lanes of Interstate 94 west at M/10 Lodge and the southbound M-10 ramp January 8, 
and created a sheet of ice. Both sections of the highways were closed overnight until 
January 9. 

Source: http://detroit.cbslocal.com/2014/01/08/i-94-a-sheet-of-ice-after-detroit-water- 
main-break/ 

7. January 7, Los Angeles Times - (California) 2, 5 freeway connector to reopen after 
fuel tanker fire caused closure. The Elysian Valley underpass connecting the 
northbound Glendale Freeway/2 Freeway to northbound 5 Freeway was scheduled to 
reopen January 10 after 6 months of closure that began when an overturned semi-truck 
spilled 8,500 gallons of gasoline and caused extensive damage to the underpass in a 
July 2013 accident. 

Source: http://www.glendalenewspress.com/news/tn-gnp-2-5-freewav-connector-to- 
reopen-after-fuel-tanker-fire-caused-closure-20140107,0,5795654.story 

[ Return to top ] 
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Food and Agriculture Sector 



8. January 9, Carroll County Times - (Maryland) Fire damages Westminster Livestock 
Auction. A 2-alarm fire at the Westminster Livestock Auction building caused 
approximately $300,000 in damages January 8, according to the Maryland State Fire 
Marshal’s office. The owner stated that there is no definitive date for reopening the 
building. 

Source: http://www.carrollcountytimes.com/news/local/fire-damages-westminster- 
livestock-auction/article 7293acab-24cd-5f5c-929c-61cd42742c22.html 

9. January 8, KDVR 31 Denver - (Colorado; Nebraska; Wyoming) Marlyce’s 
Butterballs being recalled because of undeclared allergen. The U S. Food and Drug 
Administration announced January 7 that L.M. Noodle Company recalled its Marlyce’s 
Butterballs due to undeclared wheat flour, soy flour whey, and milk. 

Source: http://kdvr.com/2014/01/08/marlvces-butterballs-being-recalled-because-of- 
undeclared-allergen/ 

10. January 8, Los Angeles Times - (California) USDA closes Foster Farms plant over 
roach infestation. A Foster Farms poultry facility in Livingston, California, had its 
operations suspended by the U.S. Department of Agriculture January 8 after inspectors 
found a cockroach infestation that raised human health concerns. 

Source: http://www.latimes.com/business/la-fi-0109-foster-farms-cockroaches- 
20140109,0,264482.story 



T Return to top i 

Water and Wastewater Systems Sector 

11. January 9, Elyria Chronicle -Tele gram - (Ohio) Ice blockage creates water crisis in 
Lorain County. Ice and frozen intake pipes to the Avon Lake Municipal Utilities water 
treatment plant impeded water flows and prompted Lorain County officials to declare a 
state of emergency January 8 over concerns that around 200,000 customers could be 
without water. County residents were asked to conserve water while water was brought 
in from other districts and efforts undertaken to reopen clogged pipes. 

Source: http://chronicle.northcoastnow.com/2014/01/Q9/ice-blockage-creats-water- 
crisis/ 

12. January 9, Baltimore Sun - (Maryland) Water restored for 300 in Fells Point after 
crews fix break. Water crews shut off service to more than 300 homes and businesses 
in Baltimore’s Fells Point area overnight January 8 to repair a ruptured water line. 
Repairs were completed, but low water pressure lasted for several hours. 

Source: http://www.baltimoresun.com/news/maryland/baltimore-citv/bs-md-ci-water- 
main-breaks -201 40 109,0,2141881. story 

13. January 8, Arlington Heights Daily Herald - (Illinois) Grayslake issues boil order for 
drinking water. A 36-hour emergency boil order was issued January 8 by officials in 
the village of Grayslake due to a significant loss of water pressure in its water pipeline. 
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Source: http://www.dailyherald.com/article/20140108/news/701Q89813/ 



For another story, see item 6 
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Healthcare and Public Health Sector 

14. January 8, KPIX 5 San Francisco - (California) 2 hurt in explosion at Amgen lab in 
south San Francisco. Two employees at an Amgen lab in south San Francisco were 
hospitalized after cleaning solvents caused a chemical reaction and sparked a flash fire 
January 8. The explosion prompted an evacuation of the building, and officials 
determined there was no public health concern because chemicals were not released 
into the air. 

Source: http://sanfrancisco.cbslocal.com/2014/01/08/lab-explosion-prompts- 
evacuation-of-amgen-facility-in-south-san-francisco/ 

15. January 8, Bowie Patch - (Maryland) Burst pipe displaces 52 seniors in Bowie. The 
Willows Senior Community in Bowie, Maryland, was evacuated January 7 after a 
water pipe burst and flooded several apartments, displacing 52 senior citizens. Crews 
were assessing the damage to determine when the residents can return. 

Source: http://bowie.patch.com/groups/around-town/p/52-people-displace-after-pipes- 
burst-at-senior-apartments-in-bowie 
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Government Facilities Sector 

16. January 8, Associated Press - (Virginia) 2 dead, 1 missing after copter goes down 
off Va. Authorities are still searching for a fifth sailor after a U.S. Navy helicopter 
crashed into the ocean off of the Virginia coast January 8 during a routine training 
mission, leaving two crew members in the hospital with injuries and two others dead. 
Officials are investigating the cause of the crash. 

Source: http://news.msn.com/us/2-dead-l-missing-after-copter-goes-down-off-va 

17. January 8, Northwest Florida Daily News - (Florida) 1 killed in King Hanger. A fire 
suppression system in King Hanger at Eglin Air Force Base released an unknown amount of 
foam January 8, killing a civilian contractor and injuring three others. 

Source: http://www.nwfdailynews.com/military/top-story/updated-l-killed-in-king-hangar- 
1.259705 

18. January 8, WECT 6 Wilmington; WXII 12 Winston-Salem - (North Carolina) School 
bus crash injures 21 elementary students. An accident involving a school bus and a 
car January 8 in Winston-Salem left 21 students injured after the car crashed into the 
bus. 

Source: http://www.wect.com/story/24400124/school-bus-crash-iniures-21-elementarv- 
students 
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19. January 8, FCW - (National) GAO: Security breach response by feds is uneven. The 
U.S. Government Accountability Office released a report January 8 citing that several 
U.S. agencies are inconsistent with responding to security breaches that involved 
personally identifiable information (PII) and do not consistently document the 
evaluation of incidents and lessons learned. 

Source: http ://fcw .com/ Articles/20 1 4/0 1 /08/GAQ- securit y-PII. aspx 

20. January 8, New York Times - (New York) 8 violations for school in wake of lab fire. 
The Fire Department for the City of New York cited and gave up to 30 days for Beacon 
High School in Manhattan to correct the 8 violations they issued after finding 
dangerous chemicals were stored unsafely, and safety equipment and practices were 
lacking in at least 3 rooms. 

Source: http://www.nvtimes.com/2014/01/09/nvregion/8-violations-for-school-in- 
wake-of-lab-fire.html?hpw&rref=education& r=0 

21. January 8, Salt Lake City Deseret News - (Utah) Fire causes $300K in damage to 
USU building in St. George. A January 8 fire at a Utah State University extension 
building in St. George caused $300,000 in damage after employees were unsuccessful 
in putting it out when they saw flames and smokes coming from a ceiling vent. 
Authorities are investigating the cause of the fire. 

Source: http://www.deseretnews.com/article/865593749/Crews-battle-fire-at-USU- 
building-in-St-George.html 

T Return to top i 

Emergency Services Sector 

22. January 9, WCMH 4 Columbus - (Ohio) Pipe freezes, bursts at CPD headquarters; 
chief’s office damaged. The Columbus Division of Police headquarters in Ohio 
rerouted bureau duties for several hours after the building sustained major water 
damage when a number of pipes burst January 7-8. The general public was advised to 
avoid entering the building while cleanup efforts continued. 

Source: http://www.nbc4i.com/story/24391734/multiple-floors-of-cpd-headquarters- 
flooded-after-pipe-bursts 

23. January 9, WIFR 23 Freeport - (Illinois) Stolen ambulance found in McHenry 
County; suspect arrested at Belvidere Walmart. A suspect was arrested at a 
Belvidere store after being on the run for more than 5 hours January 8 after he stole a 
Metro Medical Services Ambulance from the Rockford Memorial Hospital Emergency 
Room. The ambulance was found abandoned in McHenry County. 

Source: http://www.wifr.com/news/headlines/Ambulance-Stolen-from-RMH- 
239339791.html 

24. January 8, South Carolina Department of Corrections; Columbia The State - (South 

Carolina) Judge finds SC prison system violates rights, threatens lives of mentally 
ill prisoners. A South Carolina judge ruled January 8 that the State department of 
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corrections was responsible for substandard treatment given to State prison inmates 
suffering serious mental illness, calling it unconstitutional. The department of 
corrections plans to appeal the decision after they were ordered to prepare a plan to 
remedy to situation. 

Source: http://www.thestate.com/2014/01/08/3195980/iudge-finds-sc-prison-system- 
violates.html 



25. January 8, St. Louis Post-Dispatch - (Missouri) Burst water pipe collapses ceiling 
over St. Louis County police dispatch center. The St. Louis County Police 
Department’s headquarters will be closed until at least January 10 after a water pipe 
burst January 7, collapsing the ceiling of the basement 9-1-1 dispatch center. 
Dispatchers were moved to the county’s emergency operations center until repairs are 
completed. 

Source: http://www.stltodav.com/news/local/crime-and-courts/burst-water-pipe- 
collapses-ceiling-over-st-louis-county-police/article efd72143-90a8-5651-92ed- 
dl 13edf6a560.html 



26. January 8, Hartford Courant - (Connecticut) State police investigate fake emergency 
radio broadcasts. Connecticut police are searching for the individual responsible for 
making several hoax emergency radio broadcasts over the Litchfield County Dispatch 
system between December 25, 2013 and January 6. The suspect tied up resources by 
canceling fire service calls and dispatching ambulances to fake calls. 

Source: http://www.courant.com/community/litchfield/hc-state-police-fake-radio- 
broadcasts-0109-20140108,0,4131633.story 
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Information Technology Sector 

27. January 9, Softpedia - (Virginia; Arizona) Man admits hacking former employer’s 
systems to damage servers and reputation. A Tucson, Arizona man who previously 
worked for an undisclosed cloud computing services provider in Virginia admitted to 
continuing to access the systems of his former employer and to shutting down a key 
data server, causing hundreds of thousands of dollars in damage and making customers’ 
data inaccessible for several hours. 

Source: http://news.softpedia.com/news/Man-Admits-Hacking-Former-Employer-s- 
Svstems-to-Damage-Servers-and-Reputation-415363.shtml 

28. January 9, The Register - (International) Anatomy of a 22-year-old X Window bug: 
Get root with newly uncovered flaw. A flaw in the X Window System, which 
underpins many Linux desktops, was discovered that could allow a logged-in users to 
crash the X server or execute injected code as a supervisor. The stack buffer overflow 
issue has been in existence since 1991 and is present in all versions of XI 1. 

Source: http://www.theregister.co.uk/2014/01/09/xll has privilege escalation bug/ 

29. January 9, Softpedia- (International) The Straight Dope forum hacked, user 
passwords stolen. The forum of newspaper column The Straight Dope was 
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compromised by attackers that accessed usernames, hashed passwords, and email 
addresses. 

Source: http://news.softpedia.com/news/The-Straight-Dope-Forum-Hacked-User- 
Passwords-Stolen-415094.shtml 



30. January 9, Softpedia - (International) Network Time Protocol abused in DDoS 
attacks on gaming servers. Researchers found that recent distributed denial of service 
(DDoS) attacks against several online gaming services by a group called DERP 
Trolling were launched by abusing the Network Time Protocol. 

Source: http://news.softpedia.com/news/NTP-Protocol-Abused-in-DDOS-Attacks-on- 
Gaming-Servers-415059.shtml 

31. January 8, IDG News Service - (International) Nvidia takes customer site offline 
after SAP bug found. Nvidia took their customer service Web site offline January 8 
after a vulnerability in their version of SAP NewWeaver was reported. The 
vulnerability could let an unauthorized attacker take full control of the portal platform 
and was patched by SAP 3 years ago. 

Source: http://www.networkworld.com/news/2014/010914-nvidia-takes-customer-site- 
offline-277527.html 



32. January 8, Softpedia - (International) Spammers use Asprox botnet to distribute 
malicious Atmos Energy emails. Researchers at Solutionary found that a recent spam 
campaign using Atmos Energy-themed emails was launched using the Asprox botnet. 
The researchers also found that the group behind the spam emails has recently been 
varying the themes of the spam it sends according to holidays and news events. 

Source: http://news.softpedia.com/news/Spammers-Use-Asprox-Botnet-to-Distribute- 
Malicious-Atmos-Energy-Emails-414836.shtml 

For another story, see item 2 

Internet Alert Dashboard 



To report cyber infrastructure incidents or to request information, please contact US-CERT at soc@us-cert.gov or 
visit their Web site: http://www.us-cert.gov 

Information on IT information sharing and analysis can be found at the IT ISAC (Information Sharing and 
Analysis Center) Web site: http://www.it-isac.org 
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Communications Sector 

Nothing to report 
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Commercial Facilities Sector 



33. January 9, WFTV 9 Orlando - (Florida) Cops: Homewood Suites robbery connected 
to others in Orlando area. Two gunmen stole an undisclosed amount of money from a 
Homewood Suites hotel in Orlando January 8. Officials believe the robbery may be 
linked to a string of more than 10 similar hotel robberies in the area. 

Source: http://www.wftv.com/news/news/local/armed-men-rob-orlando-homewood- 
suites/ncg6J/ 

34. January 9, WTOP 103.5 FM Washington, D.C. - (Maryland) Boy, 4, killed in 
Montgomery Village apartment fire. A child was killed and four other people were 
transported to a hospital with injuries after a fire broke out at The Cider Mill 
Apartments in Montgomery County January 8. More than 40 residents were displaced 
by the fire and damages were estimated at more than $1 million. 

Source: http://www.wtop.com/52/3538367/Bov-4-killed-in-Md-fire 

35. January 9, Las Vegas Sun - (Nevada) Firefighters battle blaze at apartment 
complex near UNLV. A January 9 fire at the Century Village apartments in Las Vegas 
left nine people displaced, damaged four apartment units, and caused about $500,000 in 
damage. 

Source: http://www.lasvegassun.com/news/2014/ian/Q9/firefighters-battle-blaze- 
apartment-complex-near-u/ 

36. January 9, Dallas Morning News - (Texas) Electrical short caused three-alarm 
apartment fire in north Dallas. A 3-alarm fire broke out at the Park Place community 
in northwest Dallas January 8, leaving 4 units damaged and at least 19 people 
displaced. Authorities determined an electrical short in the attic of the building caused 
the fire. 

Source: http://thescoopblog.dallasnews.com/2014/01/firefighters-working-three-alarm- 
north-dallas-apartment-complex-fire.html/ 

37. January 9, WTEV 47 JacksonvilleAVAWS 30 Jacksonville - (Florida) Power restored 
at Regency Square Mall. Power was restored to the Regency Square Mall in 
Jacksonville after a connection in the mall’s switchboard blew out and caused the mall 
to lose power for at least 8 hours January 8. 

Source: http://www.actionnewsiax.com/mostpopular/story/Power-restored-at-Regency- 
Square-Mall/rOpa 3velUazBlBkNEWQgA.cspx# 
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Dams Sector 



38. January 8, Danville Commercial News - (Illinois) Council votes to remove dams. The 
Danville city council approved resolutions January 7 for the removal of the Danville 
Dam and Ellsworth Dam in order to improve public safety and reduce liabilities. 

Source: http://www.commercial-news.com/local/xl2778990/Council-votes-to-remove- 
dams 
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NTAS 



NO ACTIVE ALERTS 
www.DHS.gov/alerts 



Department of Homeland Security (DHS) 

DHS Daily Open Source Infrastructure Report Contact Information 



About the reports - The DHS Daily Open Source Infrastructure Report is a daily [Monday through Friday] 
summary of open-source published information concerning significant critical infrastructure issues. The DHS Daily 
Open Source Infrastructure Report is archived for 10 days on the Department of Homeland Security Web site: 
http://www.dhs.gov/IPDailyReport 

Contact Information 

Content and Suggestions: Send mail to cikr.productfeedback@hq.dhs.gov or contact the DHS 

Daily Report Team at (703) 942-8590 

Subscribe to the Distribution List: Visit the DHS Daily Open Source Infrastructure Report and follow 

instructions to Get e-mail updates when this information changes . 

Removal from Distribution List: Send mail to support @ govdelivery.com . 



Contact DHS 

To report physical infrastructure incidents or to request information, please contact the National Infrastructure 
Coordinating Center at nicc@hq.dhs.gov or (202) 282-9201. 

To report cyber infrastructure incidents or to request information, please contact US-CERT at soc@us-cert.gov or visit 
their Web page at www.us-cert.gov . 

Department of Homeland Security Disclaimer 

The DHS Daily Open Source Infrastructure Report is a non-commercial publication intended to educate and inform 
personnel engaged in infrastructure protection. Further reproduction or redistribution is subject to original copyright 
restrictions. DHS provides no warranty of ownership of the copyright, or accuracy with respect to the original source 
material. 
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